Sorry for another comment, but in my research into the topic the saddest bit of information I've seen is the image of the black box data for the flight (the first crash): https://i.imgur.com/WJuhjlO.png
You can see from the graph that in the final minutes and seconds, the pilot put insane amounts of force on the control column (aka the yoke) to try to pull the plane out of the dive - to save the 189 people on board. But no, MCAS was overpowering and lacked the documentation for the pilot to try anything else.
Also interesting to see is the amount of times the pilots bring the nose up, only for MCAS to kick in and force the nose back down. 26 times.
Don't airplanes have an equivalent of 'power steering' like we have in cars? It seems strange that pilots have to use actual physical force to move the control surfaces, and that there is a point where the physical force of a human is not enough anymore to move them. I get that Boeing wants to give pilots feedback of what is going on in and around the airplane. But putting pilots into a situation where they can't command the airplane even if they want to is a bit extreme.
Depends on the aircraft. Some modern jetliners are using fly-by-wire, while others have hydraulically-boosted controls. Some still rely on cable-and-pulley.
Either way, as I understand, it wouldn't matter with the MCAS-related MAX aircraft crashes. The elevator trim is able to move the entire elevator (literally, the entire elevator moves in response to the jackscrew controlled by the trim system) to such an extent that, depending on CG, airspeed, and other factors, it cannot be overpowered by moving the control surface to its full deflection. So whether or not the MAX had boosted controls or fly-by-wire probably wouldn't have mattered in the case the aircraft were trimmed fully nose-down. The pilots would have been struggling to maintain control either way. That's why there's stabilizer trim cut-out switches and manual trim.
I'd highly recommend Mentour Pilot's videos on the subject, links below:
Unlikely. In the case of the first crash, they didn't even get as far as switching off the stab trim (they were flipping through the flight manual to find it as the plane crashed). A second switch would have done nothing if they couldn't remember how to use the first one. Yet another switch in a cockpit (which already has hundreds of them) would also have been yet another way to create an emergency by having a switch accidentally flipped the wrong way.
In an emergency it has repeatedly been shown that pilots often forget complicated/rare recovery procedures. We need to stop relying on humans to perform at a superhuman level in these situations; better automation is the only way out.
On the other hand, there are many who believe, that automation got us into this. The more we automate, the more we depend on it which leads to problems if exceptional situations occur. [1]
Maybe the 737 Max is just too complex and relies too much on automation to fly correctly? I'm reminded of the Quantas QF32 flight, where pilots were nearly overwhelmed by the endless amount of errors and checklists they had to perform. [2]
the AF flight that was lost over the Atlantic years back (10 years now maybe?) did just that, when the pilots believed that the plane's automation was in a state that would not allow them to do anything that would result in unrecoverable flight... so they stalled it all the way into the ocean.
The problem here is nearly identical to the problems with self driving cars. The automation is capable of handling 95% of situations, but the 5% it's not capable of is not clear to either the operators or the software itself.
I firmly believe that both car and air travel need to be either 100% completely automated, or 100% under the control of the operators with well defined areas where the automation systems will ASSIST but always yield to the well trained (pilots) or poorly trained (car drivers) when requested. A human operator is able to think outside the box, and is not limited to what code has been conceived and written.
That sounds more like an issue of not correctly communicating the detected problem to the humans.
In any event, the situation where the humans aren't processing the data correctly and doing illogical things as a result would always lead to failure outcomes, until the point where we no longer allow humans to be pilots/operators at all.
I thought a central part of this was that there was according to Boeing no need to train on this particular aircraft because it was so close operationally to the 737NG. But that in fact the correct response in the particular situation is vastly different. So yes, kinda "incompetence" but more "ignorant due to Boeing's assertions that training wasn't needed"; ie the blame should not primarily rest on the pilots.(?)
I'm ignorant on the details, but this sort of article seems convincing:
> It’s probably this counterintuitive characteristic, which goes against what has been trained many times in the simulator for unwanted autopilot trim or manual trim runaway, which has confused the pilots of JT610. They learned that holding against the trim stopped the nose down, and then they could take action, like counter-trimming or outright CUTOUT the trim servo. But it didn’t. After a 10 second trim to a 2.5° nose down stabilizer position, the trimming started again despite the Pilots pulling against it. The faulty high AOA signal was still present.
> How should they know that pulling on the Yoke didn’t stop the trim? It was described nowhere; neither in the aircraft’s manual, the AFM, nor in the Pilot’s manual, the FCOM. This has created strong reactions from airlines with the 737 MAX on the flight line and their Pilots. They have learned the NG and the MAX flies the same. They fly them interchangeably during the week.
Boeing went complete retard with this. Which is funny, because historically Boeing is the company known to give final authority of the plane to the pilot, in contrast to their rival Airbus which relies more on the onboard fly-by-wire system. Modern planes have hydraulics and fly-by-wire, so pilots don't get the feedback they'd get if their controls were directly connected to the airfoils. To give pilots this feedback, Boeing simulates it mechanically by exerting force on the yoke. Normally this is fine and dandy, until the critical AoA sensor malfunctions and makes the computer think the plane is in a different attitude than it actually is in.
MCAS has nothing to do with force feedback on the yoke. MCAS adjusts the trim. The 737 does not have artificial feel in any case, as far as I know. There's a direct mechanical linkage from the yoke to the control surfaces, so no artificial feel is necessary.
> MCAS has nothing to do with force feedback on the yoke
When did I say it has anything to do with it?
> The 737 does not have artificial feel in any case, as far as I know. There's a direct mechanical linkage from the yoke to the control surfaces, so no artificial feel is necessary.
That's what I was referring to. Also whilst the 737 does have mechanical linkages to the control surfaces, they are there primarily for redundancy so the plane is flyable in case of hydraulics/power failure. By definition any hydraulics assisted system requires artificial force feedback.
> Modern planes come with stick shaker-pusher systems. That's what I was referring to.
Hmm? You were talking about systems that mimic the yoke feel of an aircraft with manual controls. A stick shaker is an emergency warning system that would never once activate on a normal flight. It has no effect on the feel of the controls.
>When did I say it has anything to do with it?
In the comment I replied to:
"To give pilots this feedback, Boeing simulates it mechanically by exerting force on the yoke. Normally this is fine and dandy, until the critical AoA sensor malfunctions and makes the computer think the plane is in a different attitude than it actually is in."
> Also interesting to see is the amount of times the pilots bring the nose up, only for MCAS to kick in and force the nose back down. 26 times.
That is awful. I heard that MCAS kicks in for ten seconds and then goes off for five seconds. So that must have been terrifying, for the pilot to think he has it under control for the death wish of MCAS to try again, and again and again until it gets its own way.
When you look at how much has been invested in Homeland Security over the last seventeen years it is doubly tragic. It wasn't terrorists that we needed to fear, it was hasty management decisions at the FAA.
1) Let's place the blame where it belongs, Boeing. The FAA didn't force them to rely on a single sensor (in fact, given that MCAS can have hazardous consequences, two are mandatory IIRC). The FAA didn't force them to have MCAS three times the control range that's mentioned in the specs. The FAA didn't force them to not mention MCAS at all.
2) While this is certainly a tragic incident, it has nothing to do with homeland security existing or not. It's not like the autopilot suddenly decided to use planes as weapons. Apples and oranges.
Thanks for that, the point has not been made in mainstream media, but time will reveal what a farce the Homeland Security thing was, a project fear to keep everyone believing what they have been believing. Meanwhile the FAA has been changed from being the helpful body it once was.
Blaming Boeing is one thing but we know from our own coding work that you don't have the programmer test and deploy mission critical stuff, you get someone else to do it. It is a team effort. In code if you cut the people out that do all the testing and just ask the programmers to deploy stuff when they want to it goes wrong.
I am not cutting Boeing slack in this, if you go back to the programmer analogy, you still get your code written to best practice before you put it anywhere near the testing and deployment people.
1) then why didn't they force them to use input from both? Why give this shitty design green light? Why outsource parts of the certification process to Boeing, the same company who's plane is to be certified?
Because of 2) obviously. All the money is gone. No budget for rigorous testing and validation of specs.
Outsourcing of certification predates homeland security - see e.g. mid-90s reporting on the 777 certification[1]. In fact, the idea of outsourcing parts of the certification process started IIRC in the mid-1940s. What did happen past 2001 (but not due to budget pressures) is that the airline manufacturers got the authority to appoint their own designees, and were allowed to self-certify.
Not for budget reasons, but for "deregulation is good" reasons. The money isn't gone. We've just got people who'd like "a government so small they can drown it in a bathtub". Well, it's drowning alright.
There's one thing I don't understand while looking at the flight recorder data:
After flaps are retracted for the final time, the altitude seems to stabilize. So why the sudden drop before the crash? Why couldn't the pilots just keep on flying on the same level?
There must be a sudden behavioural change of the plane or the pilots right before it went down, but I never got it explained to me clearly why...
Second question: why did they retract the flaps? Wouldn't the wings generate more lift with flaps extended?
IIRC, the pilot increased thrust to increase airspeed which made it harder to pull back on the yoke to fight against MCAS. I will need to check references again but I just got into bed.
Edit: here we go: Pilots have demonstrated in simulator that the trim wheels cannot be moved in severe mis-trim conditions combined with a high airspeed.[92][93] As the pilots on Flight 302 pulled on the yoke to raise the nose, the aerodynamic forces on the tail’s elevator would create an opposing force on the stabilizer trim jackscrew that would prevent the pilots from moving the trim wheel by hand.[86][91][94]
The resolution for this jammed trim issue is not part of Boeing's current 737 manual according to The Air Current.[90] The Seattle Times reports pilots on the 737-200 were trained for this failure, but latter models got so reliable, this procedure was no longer necessary.[91][90]
The drop in altitude occurred because of MCAS activations retrimming the plane into a dive. MCAS is only active during flaps retracted flight regimes.
They couldn't redeploy the flaps to shutdown MCAS because
A) they didn't know it would work, and it was not documented in any standard procedure
B) the plane was travelling too fast for safe flap deployment
C)Flap deployment decreases the critical AoA of the wing, meaning that pilots would have to be extremely careful during the recovery, and may in fact not have been able to pull out fast enough even if they fixed the mistrim.
Also, remember that a plane flying straight at the ground is still making lift as it barrels toward the earth. Lift isn't something magic that guarantees the plane stays away from the ground. The force vector will happily accelerate you 90° relative to your lifting surface's velocity vector through the fluid.
If for whatever reason you decide that that vector should no longer be parallel to the surface... Well... That's on you.
Or in this case, a computer programmed with an insufficiently robust algorithm for safely doing what it was actually meant to do. As the flight computer had no way of understanding that what its AoA sensor was telling it could possibly be wrong, and therefore alerting the pilots that they were flying on their own now.
So while the pilots knew what they wanted, the computer, not being programmed with the possibility of being wrong in mind, did exactly as it was designed to do.
And this, ladies and gentlemen, is how you kill 300 people without realizing that you're doing it.
> the altitude seems to stabilize. So why the sudden drop before the crash?
> There must be a sudden behavioural change of the plane or the pilots right before it went down
The altitude was stable because the pilot valiantly countered the AND (aircraft nose down) trim input from MCAS with ANU trim (using the electric trim switch) again and again and again. And again.
From what I gather, he then handed the plane off to the copilot to look things up in the QRH (Quick reference handbook, checklists basically), and unfortunately the copilot did not trim up quite as stubbornly, allowing MCAS to trim down so much as to be unrecoverable with elevator control forces alone. Truly terrible.
> Second question: why did they retract the flaps? Wouldn't the wings generate more lift with flaps extended?
Standard operating procedure after the initial climb, you retract flaps. Yes, wing would generate more lift with flaps, but that’s not the problem if you’re pointing downward.
Having said that, deploying flaps would have inhibited MCAS and allowed them to control the plane, maybe, but they didn’t know that.
EDIT to add: I’m talking about the doomed Lion Air flight here (which the FDR data plot linked above pertains to, if I’m not mistaken).
I don't know whether that's true or not, but either way it doesn't matter.
The AoA sensor does not function on the ground, it's basically a windvane and with no air moving over it, it would move to whatever angle gravity dictates.
It should detectably not function, though, right? On level ground, with zero airspeed, it should always be in a certain position, and a deviation from that should be something the plane can detect and compensate for.
A certain air speed is required (to turn the weather vane, as it were).
While in ground effect, the air flow is different from the airflow in flight (away from the ground), so apparently a certain altitude above ground is required for the indication to be considered reliable.
However, I believe that it should be possible to recognise a sufficiently defective AoA sensor during the take off roll, and possibly in time to abort the take off. However, not sure whether pilots are briefed to do so, as that is a risky manoeuvre in itself, and a missing AoA sensor should not be any problem per se (in the absence of MCAS that is trying to kill you).
> Von Hoesslin, who identified himself in the documents as a certified 737 instructor, submitted his resignation to Ethiopian Airlines in April.
Not seeing much discussion of the guy who called it right and is losing his job because of it. I'm not sure if there's a way to know if he's being forced out or choosing to avoid some backlash, but it seems sad that the one person in the story who made the right call pays a hefty price, as opposed to being kept, protected, and/or promoted. Same thing has happened to many people trying to do the right thing, Roger Boisjoly would be a super famous example, one of the engineers who predicted the Challenger disaster.
Are there examples of people being rewarded for their efforts after a large scale accident, rather than punished?
I think this might be a case of selective bias, as people who are rewarded for their efforts would likely prevent large scale accidents in the first place if their management listened enough to promote them.
You likely don't hear about this, because for these cases the oversight works and it's just people doing their jobs.
Oh, almost certainly! Failing to listen to warnings beforehand, and then after an incident wanting to suppress the knowledge that there were warnings, are very likely to be correlated. Not only that, there's usually a lot of money involved, and admitting company fault could be legal liability, or I would assume that's the fear anyway.
I'm just curious if there are any well-known cases of companies doing right by the people who tried to avert the accident, of companies admitting it was a management mistake as opposed to letting their fears / liability concerns / embarrassment steamroll the only people who did the right thing.
>However, that report shows the pilots left the thrust too high and turned the motor driving MCAS back on after initially switching it off.
I really wish the media wouldn't leave out important context when making statements like this.
If you aren't a pilot or an aviation enthusiast, you'd think leaving the thrust high was a mistake, but an on the fritz AoA sensor means you're in an airspeed unreliable condition, which calls for maintaining appropriate power for the desired flight regime, which in this case was TO/ascent, a regime generally flown at higher power.
Or, how leaving the airspeed issue unresolved until the more pressing issue, the plane being continually put out of trim, is a triage call akin to what a medical professional would be expected to make in a condition where there were more problems to solve than hands or brains to resolve them.
Or how Boeing intentionally changed the functionality of the console stabilizer trim cutout switches in such a way as to prevent pilots from being able to shut out the flight computer's capability to command trim adjustments with the trim motor, but maintaining the pilots' ability to leverage the trim motor to neutralize trim against aerodynamic load through their trim switches on the yoke.
This is one of those cases where we need the layman to be accurately informed at all costs. There is no room for weasel legal maneuvering that we as a society can afford when this comes to trial. The courts have no authority over physics.
True, but they hadn't even gotten to that stage of the triage yet, and had no explicit documentation or training to make them aware of the counterindication of dealing with airspeed unreliable (by dealing with it actively, or postponing it) followed by stab trim runaway.
The important takeaway is that no matter which way you look at it, this "you don't need to know" item absolutely needed to be known since new error cases altered the process of "walking the fault tree" had been substantially.
Calling them on the throttle is a bit like blaming a blindfolded man for walking off a cliff with his shoe untied.
Yes, the untied shoe may have tripped him up, but the culprit is still pretty damn clear.
This sure does contrast with all the early talking down about pilots in the developing world. People were so quick to blame them instead of looking to the people responsible for selling the planes.
DOJ needs to subpoena Boeing's internal communications for all things MCAS during and after it's development, and everything up to date.
We don't know if MCAS is the only thing keeping the planes in the air, and if it is easily disabled by faulty sensors in their new software update, we don't know how unsafe those planes are.
In the flight just before the Lion Air crash, with the same airplane, the MCAS activated wrongly, and the pilots shut off the stab trim and landed safely.
The MCAS system was known about after the Lion Air crash, and it baffles me why pilots wouldn't have known about successful corrective action taken on the previous flight. After all, I read about this in the newspaper. It wasn't a secret.
It's hard to tell from the newspaper accounts, which often leave off crucial details, but it seems the electric trim switches (on the control column) override the MCAS commands. So the way to recover is to set the electric trim switches to nose up, turn the trim system on at the cutoff switches, wait until it's trimmed out properly, then turn it off via the cutoff switches and let go of the electric trim switches.
>It seems the electric trim switches (on the control column) override the MCAS commands.
...but not if you follow the procedure set out by Boeing and reiterated in an FAR published after the Lion Air crash. The ET302 pilots recognized that they were dealing with MCAS failure, and followed the procedure, including toggling the trim cutout switches. On 737 NGs, one could turn off trim automation while allowing electrical control from the yoke, but on the Max, the latter was also disabled when these switches were toggled [1]. I don't think this way in which the Max differs from the NG came out until later.
This created a second problem - the trim wheels are very hard to turn manually under the load created by using the elevator to counteract the mis-trim. The procedure in this case is to unload the stabilizer jack-screw by pitching down, but the airplane was not high enough for that.
This might have been apparent if pilots had trained for an MCAS failure, which brings us to a question I had in another thread: Were there any simulators that realistically simulated MCAS failure, or were the simulator manufacturers and operators as much in the dark about MCAS as were pilots and airlines?
What you're saying does not contradict that the trim switches override the MCAS. Hence, trim could be restored by using the trim switches and throwing the cutouts when not using the trim switches.
I read about this in the newspaper, it wasn't a secret. I do not have inside information.
Again, if I was an MCAS pilot I'd be very interested in following what happened with the Lion Air crash, to ensure it wouldn't happen to me. I'd still follow the procedures set out by Boeing - but when they didn't work I'd do what did work.
It's a little hard to discern from the erratic newspaper reports, but during the time the pilots were fighting the MCAS they were using the trim switches and surely would have noticed that those switches overrode the MCAS.
The reason we have pilots, and not a fully automated airplane, is we need them to think outside of the procedures when the procedures aren't working. This is not impossible as the pilots in the flight prior to the LA crash did have MCAS runaway and did successfully deal with it.
It can be overridden, yes, but releasing the switch also resets the MCAS activation timer, resulting in an activation 5 seconds after the switch is released.
You would have to pulse the switch in sub-5 second increments depending on the way the switch works.
If it's a direct switch, I.e. switch held down->motor moves, then they'd have to hold it down until trim was neutralized, then cut it out.
If it's a discrete toggle, I.e. each toggle increments/decrements a set point the motor then follows; a pilot would have to be very conscious of their timing on the switches, and how much the stabilizer had actually managed to travel.
Both of these would constitute new, MAX specific skills, that Boeing cannot show any acknowledgement or foreknowledge of without opening a massive can of worms.
> It can be overridden, yes, but releasing the switch also resets the MCAS activation timer, resulting in an activation 5 seconds after the switch is released.
That's why I suggested in this thread to activate the cutoff switches when the trim is in the correct position.
The electric trim switches are a hold down => motor moves. It's not a MAX specific skill. Neither are the cutoff switches.
>The electric trim switches are a hold down => motor moves. It's not a MAX specific skill. Neither are the cutoff switches.
Neat!
>It's not a MAX specific skill. Neither are the cutoff switches.
Well, the cutoff switches functionality was changed according to the Seattle Times, so while the procedure may be shared, the semantic significance of the switches did, in fact, change for MAX.
Do you recall when you learned that the trim switches could be used to override MCAS (so long as you did not toggle the trim cutouts, if flying a Max?) I don't believe the switch issue was raised in the FAR.
While we certainly hope that pilots will be able to extemporize a solution to a situation, even if that involves going beyond or against the documented procedure, and while it is certainly possible that there was a course of action that could have saved ET302 (though the success of the Lion Air pilots does not necessarily prove that, as there were differences), I do not accept the implication that if such a course of action existed, there is nothing to be concerned about. Reliance on pilots' problem-solving skills should be a last resort, not a planned-for solution, and those skills certainly are not helped by withholding information about aircraft systems.
It was in one of the Seattle Times articles about it after the LA crash. I've never seen it since, although if you read the sequence of events it's pretty clear that's the case, as the pilots had been overriding the MCAS commands with the trim switches.
> I do not accept the implication that if such a course of action existed, there is nothing to be concerned about.
I did not suggest that. Nearly all crashes are the result of a string of failures, including these crashes, and each point needs to be corrected.
> and those skills certainly are not helped by withholding information about aircraft systems.
After the LA crash, that was no longer the case. I reiterate that my information comes from the newspaper. If I was a MAX pilot you bet I'd be much more diligent in finding things out, if only just to save my own hide.
I further find it very strange that after the prior LA flight successfully dealt with the MCAS failure, that the airplane was still deemed flight-worthy and nobody even bothered to inform the next flight crew?
There's plenty of failure that needs to be dealt with all around with those accidents.
With regard to why the Lion Air airplane was deemed flight-worthy, we have to take into consideration that, because MCAS had not been disclosed, some important information was missing from the analysis. It is unfortunate that the maintenance crew incorrectly thought that they had fixed the sensor, and perhaps felt that was enough to deal with the problem, but they may not have known how aggressively this undisclosed system could mis-trim the airplane, and the pilots certainly did not (it was even a surprise to many at the FAA involved in the Max certification.)
Maybe the crew of the earlier Lion Air flight were lucky and had the airplane temporarily back in trim at the point where the deadheading pilot recognized that they had an ongoing trim runaway situation, for which toggling the trim cutout switches was the documented response [1].
I think it is unreasonable to suggest that the EL302 pilots were negligently unprepared. After using the trim cutout switches to disable MCAS, they found they were unable to correct the trim manually, so they did exactly what you suggested in your first post: they re-engaged the electric trim and attempted, unsuccessfully, to re-trim the airplane before it crashed. This suggests a familiarity with the AD issued after the Lion Air inquiry. Maybe if they had not switched the trim off initially, they would have prevailed, but the message from Boeing after the Lion Air crash was that its pilots were at fault because they failed to use the cutout switches.
Given that Boeing was still holding to the line that MCAS failure should be handled as if it were just another case of trim runaway, and that the procedure for that was the same as on previous variants, the pilots could reasonably consider themselves to be well-prepared for the situation - they now knew about the problem, and they had trained for recovering from trim runaway on NG simulators. The AD issued after the Lion Air inquiry says "Electric stabilizer trim can be used to neutralize control column pitch forces before moving the STAB TRIM CUTOUT switches to CUTOUT. Manual stabilizer trim can be used before and after the STAB TRIM CUTOUT switches are moved to CUTOUT", but it says nothing about this differing from the NG, where one can disable faulty inputs while retaining trim-switch control. It also says "If relaxing the control column causes the trim to move, set stabilizer trim switches to CUTOUT" - and it seems quite possible that, in the case of MCAS runaway, relaxing the control column could coincide with the trim continuing to move (and the crew is not in a position to determine causation), at which point, using the cutout switches is prescribed. Finally, this checklist [1] says "If the runaway continues after the autopilot is
disengaged:
STAB TRIM CUTOUT
switches (both) [to] CUTOUT." None of this says anything directly about getting the airplane back in trim before toggling the cutout switches, if that is what is necessary to regain control if this happens close to the surface.
> so they did exactly what you suggested in your first post: they re-engaged the electric trim and attempted, unsuccessfully, to re-trim the airplane before it crashed.
The critical question here would be would be did they use the electric trim switches, and did they cut off the trim after re-trimming the stabilizer?
> None of this says anything directly about getting the airplane back in trim before toggling the cutout switches,
The FAD did say that directly, and you quoted that part.
> if that is what is necessary to regain control if this happens close to the surface.
It obviously was necessary. It's why they re-engaged the trim system.
Pilots are not robots blindly following procedures - if they were, we wouldn't have pilots on the airplanes, it would be run be a computer. Pilots are expected to have understanding of what the switches do and how to use them.
The wording of the FAD could be improved, but it is not that hard to understand. The electric trim switches override any other inputs to the stab trim, and the cutoff switches prevent powered movement of the stabilizer. Those two facts are all one needs to know to regain control.
First, a note: the link I provided in my previous post is now broken, and its target has been replaced by something that is not germane to this discussion, but you can currently find the relevant part of the checklist in [1].
On first reading, I also thought the quoted passage from the AD was an instruction to use the yoke switch to re-trim before cutting out the stabilizer trim, but the following sentence (also quoted above) makes it clear that it is not: it is actually part of a statement about what options are available to adjust the trim before and after the switches are set to cutout. I feel sure you will try to argue this point, but I am pretty confident that this is the correct reading, because the checklist has no mention of delaying trim cutout. This is very significant, because the checklist is what pilots are trained and expected to follow (and, furthermore, I believe this checklist is a 'memory item' - one of the procedures that pilots are required to be able to perform from memory.) Nothing in a checklist should be incomplete or ambiguous, nothing of consequence should be taken as read, and if anything is, it is a more serious matter than poor wording.
And the checklist is unambiguous about what to do: if the problem persists after the autopilot is disengaged, use the trim cutout, and thereafter, trim manually - this is what the crew experienced, and this is what the crew did.
It is quite clear from the documentation that the manual trim wheels were regarded as an adequate means of adjusting the trim if the electric trim was cut out. Once the pilots found that this wasn't working, they did extemporize - they re-enabled the electric trim - showing that, contrary to what you insinuate, they did understand what the switches do.
You have set up a false dichotomy between pilots acting as robots and being able to extemporize a solution to every problem from first principles. The reality is that aviation has achieved its unprecedented level of safety by, in part, by considering a great many things that could go wrong and figuring out the optimal responses, taking into account that these responses must be made in a stressful and often degraded (informationally, functionally, physiologically) situation. Pilots are trained, and expected, to execute the documented procedures promptly, and only deviate when the situation demands: extemporize on a check ride, and you are likely to fail. This is not mindless bureaucracy at work: it is the rigorous application of hard-learned lessons. At the same time, they are also expected to know their airplanes thoroughly so that they can respond to unanticipated problems, and this is precisely why they were annoyed at not being told about MCAS.
So, to summarize: 1) by their actions, the crew demonstrated that they were up-to-date on the procedures that nominally incorporated the lessons from JT610; 2) by their responses to a problem with this procedure, they demonstrated that they did understand what the switches did and how to use them. Undoubtedly they did not figure out what they needed to do as rapidly as you would have in their place, but it is unreasonable to fault them for that.
I recently learned that, prior to the Max, the trim wheels were so rarely needed that their use was no longer part of simulator training, and the diameter of the wheels was reduced on the Max, yet here we have an AD saying you can use these wheels to trim the airplane when the electrical mechanism is cut out, and item 6 on the checklist explicitly says to do so. Elsewhere in the AFM it notes that the trim wheels can be hard to move in some circumstances, but if you are going to fault the pilots for not connecting the dots, then it applies doubly so for the people at Boeing and the FAA tasked with writing and certifying the procedures for handling an MCAS failure, who all apparently overlooked something that was obvious to you just from reading some newspaper articles.
At this point, the more you argue that an effective procedure for dealing with MCAS runaway was obvious following the JT610 inquiry, the more you indict Boeing and the FAA for not making it explicit in their response.
I suspect it's that initially, pilots believe MCAS is doing the right thing. It's only after things get really bad can they potentially realize the MCAS is the problem. After all, the AoA disagree warning wasn't installed on all planes. If all your sensors and automation are telling your the plane is in danger of stalling, how can you determine they're all incorrect?
Yet they all knew about the MCAS failure after the Lion Air crash. How could they not? It was in the newspapers constantly. If I was an MCAS pilot, I would have been intensely interested in the Lion Air crash, if only to be damn sure it wouldn't happen to me.
Well, the second crash pilots did figure it out. They didn't have altitude to nose-down the plane to unload the trim, so they couldn't successfully manually trim the plane. I think there were also some airspeed indicator problems as well, but I haven't seen that reported in a while.
Check out the altitude graphic here [1]. It must have been absolutely terrifying, I doubt many of us have the nerves of steel to react so quickly and correctly in such a situation.
> I doubt many of us have the nerves of steel to react so quickly and correctly in such a situation
Indeed. That's why, if I was an MCAS pilot, I would have carefully read the reports on what went wrong, what went right with the previous LA flight, how the trim system worked, and what I needed to do if it happened to me.
It's my own life at stake. I don't understand not doing this.
My father used to do acrobatic formation flying with the Air Force. The idea for everyone but the lead is to concentrate on the wingtip of the adjacent airplane and track it. There were incidents where the lead would fly into the ground and the rest of the formation would fly in, too.
Against orders, my dad said he'd be damned if the lead would fly him into the ground, and would keep one eye on the wingtip and the other on the ground. He died as a very old man.
You might also want to read Chuck Yeager's biography. In it he makes a point of not just following checklists, but learning how the airplane systems worked. Saved his life many times. Yeager's still alive, and has buried many of his colleagues who took shortcuts.
Interesting you use the military as a reference point here for responding in critical situations. The military trains exhaustively so responses to critical situations are reflexive. Fortunately, your father was a pilot, and not a grunt. When you're told to storm the beach, you storm the beach, doesn't matter if it means certain death for you, it's not about you, it's about taking the beach.
The pilots could have also had this reflex training on the effected systems, but Boeing and the regulators decided not to bother with training, and the training they did have was inadequate because Boeing's system was fatally flawed.
> They didn't need to manually trim it:
This procedure you outlined goes directly in the face of Boeing's guidance to 'follow the procedure for runaway trim'. Since the system wasn't documented at all, I assume people would trust that the procedure should work. It's not until the plane is diving into the ground due to uncorrectable trim did they discover the procedure was going to get them killed.
The EA pilots followed the procedure, and when it didn't work they went off procedure (i.e. they turned the stab trim system back on) which led to the final plunge. If they had used the trim switches after turning the system back on, it would have corrected the nose down. It seems the natural thing to do. Why didn't they? I do not know, and none of the accounts I've read addressed this.
I suspect that will be a crucial point in the NTSB's report.
Your assessment about pilots not being ordered to their deaths is incorrect. My father served as a navigator on B-17s in WW2. He was ordered to fly 30 missions. At the time, the 30 mission survival rate was 20%, as bad as any beach assault.
The aircrews knew this, and it put a terrible strain on them. But they went anyway. My father told me he was convinced he was going to die, made peace with it, and simply decided to do the best job he could before he bought it.
The Luftwaffe pilots had it even worse. There was no 30 mission maximum. It was fly until you die. Not many survived.
> Why didn't they? I do not know, and none of the accounts I've read addressed this.
I've wondered the same thing. My assumption is that the MCAS disables the input of the trim switches used by the pilots when it's active. We know that MCAS resets itself after certain conditions and 'forgets' what it did previously to override it's intended maximum authority. It's also be stated that the MCAS is 'reset' when the pilot uses the trim switches, but I would think that this would have been abundantly apparent as well: press switch, nose stops going down, unless they just did not notice the trim being activated in the first place (which based on other people's accounts, that would be hard to miss due to a giant wheel).
> Your assessment about pilots not being ordered to their deaths is incorrect. My father served as a navigator on B-17s in WW2. He was ordered to fly 30 missions. At the time, the 30 mission survival rate was 20%, as bad as any beach assault.
Fair enough, that does sound pretty brutal. My point was more about the reflexive training to overcome fear to function. It might be impossible to think critically in such a moment for most people, thus the goal is to put people on 'autopilot' when they encounter a specific scenario.
But, WW2 was USAAF, USAF didn't exist yet, so no way for me to get that context ;)
> Why didn't they? I do not know, and none of the accounts I've read addressed this.
I can give you a good hunch as to why.
Because the absolute last thing a pilot wants to do with a plane load of people is experiment. That's what a simulator is for.
I stumbled across the "suppress MCAS by trim switch spamming" within the first few seconds after I read a complete description of the system's functionality.
It took a complete description of the problem, and a background in programming/systems design, engineering, and an enthusiast+ level of aviation familiarity to come to that course of action in that amount of time, under ideal information processing conditions, with the initial information uptake immediately prior to the advent of reasoning.
Airline pilots had how to fly, and no information initially that there were dragons there, and even once they knew, they had no way to try to build new situational reflexes due to the lack of availability of accurate MAX simulators, because Boeing fought tooth and nail to get the regulator to agree that they weren't necessary.
They had to manually fault inject on an NG simulator to even get an understanding of the conditions involved.
Military pilot training, from my understamding, bypasses the simulator, and dumps you into the seat of some of the most disagreeable aircraft ever designed, with an instructor who sabotages you regularly, leaving you in a spin, and you have 30 seconds to recover please. Begin.
In that case, it's you, and the a-hole who just put you in a flat spin. Experiment away. Not 100+ innocent civilians depending on your ability to reason through what this damn plane is doing.
Point being, information about the airframe was withheld due to an absolutely crushing need by Boeing for the aircraft to not require even the smallest degree of retraining.
The pilots were absolutely not at fault for not being able or willing to experiment at the drop of a hat with a system they suddenly realized they had no way to understand.
Putting them in that position in the first place is undeniably Boeing's fault.
> It might be impossible to think critically in such a moment for most people
Indeed. Pilot training should attempt to wash out those people.
There's an audiotape of a test pilot who's airplane went into an uncontrollable spin at high altitude. He was in conversation with the ground, and methodically tried one thing after another, all the way down, voice even and calm to the end. It's astonishing.
While you say many insightful things, what is grating about your posts is that they seem to imply that many MAX (or at any rate the accident) pilots did not care, did not read up on it, did not read the newspapers and pilot rumour fora and ADs. Furthermore, you seem to imply that if they had, they could have easily salvaged the situation.
I am pretty sure that most if not all pilots are following these things very carefully. As you know well, Boeing has been way too slow to divulge the information necessary for “learning how the airplane systems worked”.
The Lion Air pilots didn’t know how the system works because they could not know. The Ethiopian Airlines pilots did cut out Stab Trim, and later switched it back on, possibly because they know more about the system than you do, and it made sense to them to deviate from the checklist (just the way you advocate, incidentally) - consider the two switches on the NG and undisclosed change in functionality on the MAX. Or maybe it was a CRM mistake, maybe one pilot thought the other one would hold the etrim switch pressed ANU.
We don’t know yet. But it is rather annoying to read from you how you’d have saved the plane so and so, because you followed the story in the newspaper and value your life and all. But, yeah, keep telling pilots to read the newspapers and inform them that they’ll die if their airplane crashes, maybe then we won’t have any accidents anymore.
>Check out the altitude graphic here [1]. It must have been absolutely terrifying
That graph is based on faulty FlightAware data. According to the preliminary report they were at 7,000 feet AGL and climbing when they re-enabled the electric trim.
It's horribly unpopular to pick on the dead pilots, particularly when it looks like you're sticking up for a big evil corporation, but sadly you're very likely correct. In both cases, the pilots didn't strictly follow procedure. In the Lion Air case, they forgot about the stab trim completely for some reason. This had happened on the previous flight too; it was only saved because a 3rd (non-Lion Air) pilot happened to be in the cockpit and told them what to do. In the Ethiopian Air example, they remembered, shut off the stab trim, but then increased thrust too high to adjust the trim manually, and then turned the electric trim system back on. It's possible they could have saved the plane at that point, adjusting the electric trim by hand then turning it back off (to defeat MCAS), but they didn't.
It remains crazy how much this procedure would have required the pilots to do. It's utterly senseless how bad cockpit automation remains in 2019. If Boeing was going to add a bunch of code to the cockpit, they should have made flying the plane in an emergency easier, not harder.
> In both cases, the pilots didn't strictly follow procedure
But would "the procedure" actually have saved the plane? I don't believe so. WalterBright is arguing that the pilots should have known better than "the procedure" and done something different from what the checklists and memory items proscribed. I can't comment on doing so — as I'm not an airline pilot — but to put blame on pilots in this sort of situation without acknowledging Boeing's actions is beyond tasteless.
I specifically wrote "There's plenty of failure that needs to be dealt with all around with those accidents." That means Boeing, the airline, the FAA, and the pilots. To say that any one action is 100% of the cause is incorrect. Every point of failure needs to be corrected in the chain of events leading to the crash.
> tasteless
When you're trying to make airplanes safe, matters of taste, politics, emotions and legal culpability have nothing to do with it. The NTSB has a very good track record of dispassionately sticking to the facts, and I am looking forward to reading their report.
Here's the deal, though: this wasn't just one crash. It was two. The failure mode of the second was indeed different than the first: it was a failure of Boeing and the aviation authorities to appropriately respond to the first disaster.
To propose that pilots should have willy-nilly flipped MCAS on and off based on your reading of the news is just staggering. What if there was another bug where turning on MCAS when there was an AoA disagree led to an instant plunge, regardless of etrim inputs? I'd bet you'd be critiquing those dead pilots for not following the checklist — and keeping MCAS off — in such a case.
Turning it back on is indeed what the EA pilots did after being unable to use the manual trim, if I read the account correctly, the MCAS re-engaged and caused the final plunge. That wasn't on the checklist. But if they'd also engaged the manual trim switches, it would have corrected the nose down.
It's not willy-nilly nor staggering. The EAD (referenced in another post here) indeed talks about using the electric trim to fix the nose down problem, and then cutting off power to the system.
I think one piece of information you’re missing is that they also had cockpit warnings that the sensors were malfunctioning, and the pilot side controls were stuck on stick-shake the whole ride.
So add in the part where you can’t actually trust what your instruments are telling you, and the plane is flying like a demon has possessed it.
In the moment you are wondering, is the plane stalling? Is my airspeed actually what is being displayed? Why is trim not responding? My heart is beating 200bpm. Is that whooshing the blood in my ears or the wind?
The answers to these questions is obvious in hindsight. In that moment the flight had entered mortal peril. The question is not why didn’t the pilots recover from mortal peril with perfect hindsight. The question is how did this flight get into mortal peril in the first place?
Yes, indeed. It doesn't talk about turning STAB TRIM back on, though, nor does it talk about turning STAB TRIM on with etrim inputs already applied — that's what I was calling your homegrown protocol.
My point is that it's easy to armchair quarterback the pilots whether they followed the checklist or went off checklist to do something better or worse. The problem started long before they got in the cockpit, though, and had been made evident once before at the cost of 189 lives. To continue to focus on pilots' actions at this point is missing the elephant for the flea.
> It doesn't talk about turning STAB TRIM back on, though, nor does it talk about turning STAB TRIM on with etrim inputs already applied — that's what I was calling your homegrown protocol.
The EA pilots already had gone off the checklist when they turned the stab trim back on.
Responsibility is a tricky thing in tragedies like this. In hindsight, yeah, Boeing undoubtedly should have made more noise about this possible failure condition, and/or tested the system better, and/or designed the stall-prevention system to deal with sensor failures more gracefully, and/or redesigned the wing, and/or spent more time on their simulators, and/or designed a whole new plane. But none of those options are risk-free in terms of safety. Making MCAS more complicated might have made it riskier and harder to test. A new airplane could have come with new problems (like the 787, which has nearly exploded in flight due to battery problems).
I said "pick on" the pilots, not "blame" them. There were a lot of bad things that added up. In the case of the Lion Air flight, the maintenance staff signed off on the plane even though they were aware the angle-of-attack sensors were completely broken, which had nearly caused a crash on the previous flight. The previous flights' pilots also either didn't report this incident, or their report was disregarded. Then when the emergency occurred, the pilots didn't know what to do. There are many reasons that that any plane's trim system could have malfunctioned, and the black box data suggests the pilots would have been unable to manage any of them. So the plane was taking off in an non-airworthy state with pilots who didn't know how to deal with a common system failure and weren't told that a system had just malfunctioned hours previously on this exact aircraft. The MCAS failure was a match thrown into a kindling box of bad circumstances.
Ok, sure, but you're picking on the pilots for not following Boeing's procedure exactly. And at the same time, WalterBright is picking on them for attempting to follow the procedure. And at the same time, I'm arguing that it's unclear if Boeing's procedure would have saved them at all.
The LionAir crash was a tragedy. The Ethiopian Airlines crash was not just a tragedy; it was a complete systemic failure to appropriately react.
> The MCAS system was known about after the Lion Air crash, and it baffles me why pilots wouldn't have known about successful corrective action taken on the previous flight. After all, I read about this in the newspaper. It wasn't a secret.
One thing to keep in mind: it’s not like there’s a big sign popping up saying “hey, AoA is faulty, MCAS is trimming down the nose, unless you set Stab Trim switches to cutout. What do you want to do?”
Instead, you have stick shaker activation during climb out, EICAS warnings, chaos, and you struggle to bring things under control by putting the plane into a stable, manual, mode (autopilot off, flaps up, ...), and then MCAS kicks in surreptitiously, more or less (you have the trim wheels turning, but a lot of other stuff is going on), and trims your nose down.
> it baffles me why pilots wouldn't have known about successful corrective action
They did, and they flipped the stab trim switches to cutout, but they didn’t manage to overcome the required forces on the trim wheel to trim properly, and switched the stab trim back on. Now, there was the other issue with there being two stab trim switches on the NG with different function, which, if I understand correctly, would allow you to reenable the electric trim switch on the yoke while keeping the automatic stab trim disabled - but on the MAX apparently those two switches are identical, without that having been mentioned, to avoid recertification (I haven’t seen any proper elucidation of that yet - if you have two identical off switches, do you need to set them both to off, or only one, to turn it off?). I wonder (and again, haven’t seen anything about that yet) whether they flipped one of the switches back on, to get the electric trim support, deeming themselves safe from MCAS as the other one was still cut out, only to be foiled by the aircraft.
I believe it was a third pilot who just so happened to be in the plane who noticed the trim wheels spinning. From the pilot or copilot seats the trim wheels are not that noticable, especially when there was no indication or reason to believe the plane was trimming.
The trim makes a loud clacking sound when it's running, for that reason. (And the Ethiopian pilots did know the trim was running.)
This is what I mean when the newspaper articles constantly leave out crucial details. You have to read many articles to get an idea of the complete picture.
It doesn't matter that a third pilot figured out what was wrong and what the corrective action should be. Because after he did it, it was known and all the pilots should have known.
You know how you make it known to pilots? Not by reading the news. By having the manufacturer issue an airworthiness directive. And Boeing did. And yet it did not prescribe what you're advocating. Are you suggesting that you — a non-737 pilot — know better than not only the pilots in the crashed planes, but better than Boeing as well? Their AD does not list your homegrown procedure as a remedy.
You know how else to make it known to pilots? By making it a part of their training materials. But Boeing had significant financial interest in not doing so.
Boeing is trying to claim inadequate training (by the airlines) is the problem, not the fact the MCAS software bandaid had serious design flaws yet Boeing pushed for it in order to compete with Airbus.
If poor training was the cause the plane shouldn't have received the same type number. So this is all still on Boeing. Boeing also specifically told these planes with the benefit that only a few hours of training would be enough.
Boeing seem to be pushing part of the blame to the pilot's -"Pilot error" - but this isn't due to 'lack of training' but the fact there was NO training and MCAS was not included in the manuals [1][2].
> Jon Weaks, president of the Southwest Airlines Pilots Association, said Monday the airline and the pilots “were kept in the dark.”
“We do not like the fact that a new system was put on the aircraft and wasn’t disclosed to anyone or put in the manuals,” he said in an interview. What’s more, he noted, Boeing and the Federal Aviation Administration have now warned “that the system may not be performing as it should.”
> "Since it operates in situations where the aircraft is under relatively high g load and near stall, a pilot should never see the operation of MCAS. As such, Boeing did not include an MCAS description in its FCOM. The explainer continues: "In this case, MCAS will trim nose as designed to assist the pilot during recover, likely going unnoticed by the pilot."
There is another explanation, according to a Tuesday report in The Wall Street Journal: "One high-ranking Boeing official said the company had decided against disclosing more details to cockpit crews due to concerns about inundating average pilots with too much information - and significantly more technical data - than they needed or could digest."
This has very little to do with the plane's ability to glide. (A 737 glides just fine, if a bit steep for my taste).
In that particular emergency, the control surfaces prevent it from gliding. You can even have issues on a Cessna - loss of elevator is not fun.[1]
It's not about "denying physics", it's about having insufficient redundancy[2] and improper amount of control from MCAS - 3 times more than the FAA approved: [3]
No plane is 100% safe. Boeing made this one worse for the sake of saving money - the physics work out just fine, and gliding ability is not really impacted. (But I don't think it'd be a normal response - I can't imagine a pilot thinking "oh, I'm getting a stall warning with nose down at 4,000 feet, I know, I'll cut power and glide".)
The 737 can glide as fine as a plane of that size can. The MAX didn't change anything at that and no one was denying physics. The problem was the MCAS, which as a result of a single sensor malfunction would aggressively point the nose down via the stabilizer trim.
Yep, the reason they implemented MCAS was because they popped on some larger engines, which were too close to the ground, so they moved them up and forward on the wing a bit. This gave the plane a tendency to tilt up which could cause a stall, so Boeing added some software to bring the nose down.
In both crashes, one of the two Angle of Attack sensors was incorrect. Boeing only use one AoA sensor per flight (alternating for some bewildering reason), and in this particular flight it was constantly incorrectly stating the plane was nearing a stall. So MCAS would continually kick in until the Pilot could no longer keep the plane in the air.
> "This gave the plane a tendency to tilt up which could cause a stall"
That tendency also exists on Classic and NG 737's, and is something pilots are trained to compensate for. The issue with the MAX is the degree of this tendency changed. MCAS was meant to emulate the old (less severe) behavior.
Couldn't Boeing just put in a bunch of gyroscopes into the chassis and use that as a backup AoA sensor? (I am not a pilot so I have no clue if that is reasonable)
The plane attitude (what you can sense with gyros) and angle of attack are very different things. They only coincide in level flight with no wind (the attitude is measured to the earth frame of reference (transposed by gyros) and the AoA is measured with reference to the local wind stream)
Indeed, part of this story is that the MCAS system was not classified as "critial" (i.e., a system which can cause a crash if it fails). If it had been, then it would have faced additional scrutiny and they'd probably needed three AoA sensors and majority voting. Apparently the authority of the MCAS system was increased during development, with the criticality judgement based on the old smaller value.
Because it focuses blame on the airlines and pilots for executing poor judgment, and suggests that Boeing didn't create any risk that the downstream parties weren't aware of or in control of.
In one it helps them, pushing the narrative that more training would have avoided the disaster, on the other hand this questions if MAX should have been approved by FAA as a 737 variant that does not require re-training.
They claimed that no training was required to fly this plane (a requirement of it being able to retain the 737 type rating). If it does in fact require additional training then that's very bad for their narrative.
It is both. FAA establishes guidelines for planes and designs to meet, and the airlines (not just Boeing) are responsible for certifying and rating their planes according to those guidelines.
This is not simply a case of regulatory capture, the FAA simply doesn't have the expertise and in-depth knowledge to perform completely independent verification. Requiring the FAA to do so might be prohibitively expensive, so this arrangement is the result of pragmatic realism more than regulatory capture. It does require a great amount of trust between all partners though, and it seems to me Boeing has been more than happy to skirt their responsibility in this case.
The FAA delegate much of the certification to Boeing [1], and to me it seems either the FAA is underfunded, or Boeing was in bed with the FAA to push things through quicker.
The only reason the FAA delegates is because they could no longer pay a competitive salary to retain aeronautical engineering talent given the better pay in the private sector. So they delegated.
This completely missing the point of independent certification, validation, and acting as a proxy for the "customer of first resort" is the entire point of a regulator. If you can't sell an independently staffed regulator on your design, flying their own test regime, you shouldn't be making planes period. The new regime basically relegated the FAA to the role of paperwork auditor; a reactive instead of proactive regulatory process.
Seems like a clear case of negligence, so yes, they will pay for the deaths. A high level program manager may go to jail if there is a paper trail, but we don’t jail people at the CEO level in the U.S. for negligence or fraud usually.
There’s a separate system of punishment for them involving their children hating them and acquired learning disabilities from cognitive dissonance. (Not a joke these are actually the primary mechanism by which America holds that class in check).
You can allow yourself to become corrupt in order to succeed financially, and try to hide that corruption from your family... but A) children, with a decade to study you, are lie detection beasts and they will see your true self, and B) the cognitive dissonance you need to frame your abusive behavior as “normal business” will interfere with your ability to learn new things that conflict with your internal narrative. Those blind spots make adjacent things harder to learn, leading to spreading blind spots, which eventually become a generalized learning disability.
See for example the Theranos board. Living as a CEO/power broker type can lead to debilitating dementia in middle age.
This is one of the reasons we so rarely see middle managers drop back down into individual contributor roles. Early dementia literally inhibits the clear thinking required for production work. In a leadership role they can rely on the management hierarchy for executive function, but lose the ability to do it alone.
Fantastic! Congratulations! You just found a way to articulate the underlying concept of Perception Management and Reality Distortion Fields.
Bravo!
Even if you don't have academic sources, that greatly crystallized many anecdotal observations I've collected!
EDIT: What? I'm not even being sarcastic or tongue in cheek. I've seen the aftermath of what the poster has described many times in my career in terms of cognitive shift occurring in certain roles.
I'm not being judgemental even, one way or another, but I've run into a phenomena similar when trying to get something across to organizational leaders, to the point of having to conduct meetings behind closed doors and refusing to end the meeting until the point can be successfully communicated from all involved.
As to whether it is a learning disability or not, no comment, but there is definitely an effect on capability to reconcile organizational reality with physical reality.
If you haven't run into it, I suppose I must just be either the luckiest or unluckiest fellow on the planet. I'm still not sure whether or not there is an unwritten acknowledgement or tacit agreement to not call out or discuss the phenomena, because it never seems to make anyone comfortable. Whereas I find the idea liberating, because it means there is at least a reason for communication difficulties that is possible to overcome, even if it isn't terribly fun for everyone involved.
It's one thing to disagree, or to not have access to certain information to reason on.
It's another completely to know, and knowingly deceive, feign ignorance, or go out of your way to avoid having to come to terms with something.
And yes, I understand my view does not make me super popular in some circles, where fast and loose with the truth is more the norm.
It would be more just to incarcerate the company by making it suspend trading for its entire sentence. then when it makes any kind of pitch or advertisement, it has to disclose that it is a convicted felon
Indictments are issued all the time. Enron, Michael Milken, the Savings & Loan crisis; Pharma Bro Shkreli, Sri Lankan "Whale" trader, upcoming: Theranos.
" The Chicago-based planemaker, while careful not to be seen blaming a customer, has noted the role pilot actions also played in the Ethiopian and Lion Air disasters."
"What were they doing flying our planes if they didn't want to crash?"
> Jon Weaks, president of the Southwest Airlines Pilots Association, said Monday the airline and the pilots “were kept in the dark.”
“We do not like the fact that a new system was put on the aircraft and wasn’t disclosed to anyone or put in the manuals,” he said in an interview. What’s more, he noted, Boeing and the Federal Aviation Administration have now warned “that the system may not be performing as it should.”
> "Since it operates in situations where the aircraft is under relatively high g load and near stall, a pilot should never see the operation of MCAS. As such, Boeing did not include an MCAS description in its FCOM. The explainer continues: "In this case, MCAS will trim nose as designed to assist the pilot during recover, likely going unnoticed by the pilot."
There is another explanation, according to a Tuesday report in The Wall Street Journal: "One high-ranking Boeing official said the company had decided against disclosing more details to cockpit crews due to concerns about inundating average pilots with too much information - and significantly more technical data - than they needed or could digest."
That last statement is extremely patronizing towards airline pilots, and also self-defeating: the more Boeing says telling pilots would have added "significantly more technical data", the less defensible is its position that no additional training was needed. The alternative to telling pilots in advance was to blindside them with unexpected and inexplicable aircraft behavior when the system failed.
Boeing’s position was: if there is uncommanded Stab trim movement, use the stab trim runaway checklist, just as before. No need to know why the issue occurred in the first place.
Now, clearly that didn’t work very well, and there are many other problems, but I wouldn’t call Boeing’s initial attitude there “lies” or “extremely patronising”.
My "extremely patronising" comment was explicitly in response to one specific statement from Boeing. Personally, I would not call Boeing's response "lies"; rather, it seems to me, it is probably being careful to not make any objectively false statements that could come back at them in an inquiry or court of law, while also attempting to imply that its actions always put safety first, and that training cost avoidance was never an overriding concern. My main point here is that, in doing so, Boeing appears to contradict itself in a way that weakens their position on the latter issue.
Boeing cannot say anything suggesting that this pilot was right, and that his warnings should have been heeded, without simultaneously admitting that it was wrong in saying that such training was not necessary.
There's another issue raised here: what sort of training was available? By withholding the existence of MCAS, did Boeing create a situation where there were no simulators with the capability to train pilots in handling an MCAS failure?
It seems like Boeing never considered the possibility of an MCAS failure beyond some footnotes in the manual.
It smells like a classic case of under-engineering. In a properly engineered system someone would have asked "What if an AoA sensor fails during flight?" and forced the MCAS to be redesigned. This question would have been asked about every single part of the system before it was deemed ready for production.
Yes. Clearly, there was some failure in systems engineering. And one must look at this very carefully and find out what went wrong such that many good diligent highly qualified people screwed up so royally.
But unreflective ill-informed hostile accusations sometimes seen here (“lies”, “care only about profits”, etc.) is certainly neither appropriate nor helpful in avoiding a repeat of the problem.
You can see from the graph that in the final minutes and seconds, the pilot put insane amounts of force on the control column (aka the yoke) to try to pull the plane out of the dive - to save the 189 people on board. But no, MCAS was overpowering and lacked the documentation for the pilot to try anything else.
Also interesting to see is the amount of times the pilots bring the nose up, only for MCAS to kick in and force the nose back down. 26 times.
All data from this Seattle Times article, which was written before the second crash occurred: [1] https://www.seattletimes.com/business/boeing-aerospace/black...